Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa
File: 3139392e3233312e37302e302f32342d3234203d3e203231363431.roa (raw, json)
Hash identifier: bpgxiugl9G+mylRbbyYNd0C5UrbRwfHB+bF+Ck63uC8=
Subject key identifier: 8A:1F:A4:2D:53:59:50:B6:7C:52:1F:59:58:6A:B7:4F:E5:2F:F8:15
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 0554F555FA152995A21163AFC3C4EA0A240AD418
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa
Signing time: Mon 20 Jan 2025 23:27:31 +0000
ROA not before: Mon 20 Jan 2025 23:22:31 +0000
ROA not after: Mon 19 Jan 2026 23:27:31 +0000
asID: 21641
IP address blocks: 199.231.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:54:f5:55:fa:15:29:95:a2:11:63:af:c3:c4:ea:0a:24:0a:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Jan 20 23:22:31 2025 GMT
Not After : Jan 19 23:27:31 2026 GMT
Subject: CN=8A1FA42D535950B67C521F59586AB74FE52FF815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:0d:48:38:a5:f1:c3:45:0e:a4:6a:53:63:
b1:3a:d9:7e:14:8c:b5:c2:26:e9:d4:f8:76:8e:81:
d5:75:8d:df:6e:d6:5e:f1:cb:9f:69:0e:b5:7e:ba:
db:72:69:11:bb:ef:65:eb:f6:d6:f7:2b:49:b0:73:
e9:80:d9:a1:37:2a:f3:9b:8a:ec:43:1e:a2:47:12:
67:fe:9f:e6:d9:96:54:f9:99:af:bd:9f:30:fb:3a:
a0:5a:8d:a8:35:27:09:8d:8e:bb:24:13:8e:84:f3:
33:7f:b3:e5:73:f9:54:29:72:ab:0d:23:44:66:6e:
62:08:9a:f3:d9:65:ee:bb:55:9c:fa:96:3e:f1:9c:
8c:da:83:55:6b:b0:cd:65:e1:7a:5c:69:a6:39:71:
9a:27:3d:f9:2d:29:3b:33:18:56:eb:f6:c9:57:09:
f4:79:65:0d:26:ba:ff:5f:33:18:f4:2b:17:bb:c4:
a4:11:c3:0b:9b:d7:76:a1:cd:ab:d5:19:fa:04:2b:
b8:f1:d1:55:09:40:ba:51:db:f3:5b:b7:d0:cf:bd:
db:70:e3:04:c0:5e:44:6c:af:08:90:c3:c2:7e:d4:
28:01:02:3f:14:a4:db:ae:e4:92:61:16:00:51:8a:
2b:f8:0a:cb:df:cd:98:1e:0c:5c:8b:1e:d0:21:94:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:A4:2D:53:59:50:B6:7C:52:1F:59:58:6A:B7:4F:E5:2F:F8:15
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:47:55:89:f6:83:6a:89:f6:9d:91:64:c0:15:b0:9a:54:35:
8e:90:e5:31:60:b8:2b:65:e2:a4:db:82:5b:30:45:58:53:da:
43:ea:1b:63:5a:3b:6d:88:80:92:82:d4:9d:06:65:2b:5b:0b:
c5:f3:a5:a7:77:d1:90:30:a5:38:c2:db:ae:81:bb:ec:b8:e3:
7d:4b:51:0d:ce:35:cc:90:db:01:ca:30:c0:39:a6:b1:0a:3b:
ba:10:90:8d:d6:ae:1c:bc:2f:d8:0e:00:77:8c:62:64:2b:2c:
eb:e0:5e:ab:82:45:f1:be:2e:64:0d:d9:25:ca:38:ce:33:ba:
b6:ed:0a:a6:04:51:a2:1f:d8:4d:59:4b:8c:3f:68:d6:c8:12:
93:eb:dc:59:f1:91:c6:b3:a0:2c:5b:af:91:da:27:5f:f0:a7:
c4:32:5e:21:78:79:87:3c:40:35:b0:2c:5e:4b:1d:38:f3:16:
38:85:8f:cc:ae:4d:c3:f7:f0:59:5c:e2:5b:c2:08:bf:96:90:
73:95:4d:8d:4f:0d:85:d5:d2:fe:b0:34:d1:30:c7:6c:4e:57:
05:70:81:5a:df:e3:64:89:de:c7:73:3c:b7:b5:55:77:b8:6a:
c6:a4:a5:0d:7e:83:8d:16:c7:1a:b3:9f:f0:63:3b:79:66:8e:
99:d6:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net